The problem with Bangladesh’s data protection framework and its solutions | The Business Standard
Skip to main content
  • Latest
  • Economy
    • Banking
    • Stocks
    • Industry
    • Analysis
    • Bazaar
    • RMG
    • Corporates
    • Aviation
  • Videos
    • TBS Today
    • TBS Stories
    • TBS World
    • News of the day
    • TBS Programs
    • Podcast
    • Editor's Pick
  • World+Biz
  • Features
    • Panorama
    • The Big Picture
    • Pursuit
    • Habitat
    • Thoughts
    • Splash
    • Mode
    • Tech
    • Explorer
    • Brands
    • In Focus
    • Book Review
    • Earth
    • Food
    • Luxury
    • Wheels
  • Subscribe
    • Epaper
    • GOVT. Ad
  • More
    • Sports
    • TBS Graduates
    • Bangladesh
    • Supplement
    • Infograph
    • Archive
    • Gallery
    • Long Read
    • Interviews
    • Offbeat
    • Magazine
    • Climate Change
    • Health
    • Cartoons
  • বাংলা
The Business Standard

Sunday
July 06, 2025

Sign In
Subscribe
  • Latest
  • Economy
    • Banking
    • Stocks
    • Industry
    • Analysis
    • Bazaar
    • RMG
    • Corporates
    • Aviation
  • Videos
    • TBS Today
    • TBS Stories
    • TBS World
    • News of the day
    • TBS Programs
    • Podcast
    • Editor's Pick
  • World+Biz
  • Features
    • Panorama
    • The Big Picture
    • Pursuit
    • Habitat
    • Thoughts
    • Splash
    • Mode
    • Tech
    • Explorer
    • Brands
    • In Focus
    • Book Review
    • Earth
    • Food
    • Luxury
    • Wheels
  • Subscribe
    • Epaper
    • GOVT. Ad
  • More
    • Sports
    • TBS Graduates
    • Bangladesh
    • Supplement
    • Infograph
    • Archive
    • Gallery
    • Long Read
    • Interviews
    • Offbeat
    • Magazine
    • Climate Change
    • Health
    • Cartoons
  • বাংলা
SUNDAY, JULY 06, 2025
The problem with Bangladesh’s data protection framework and its solutions

Thoughts

Kamrul Faisal
19 August, 2022, 12:30 pm
Last modified: 19 August, 2022, 12:45 pm

Related News

  • Govt issues gazette of Cyber Security Ordinance
  • Chinese internet giant Tencent interested in entering Bangladesh market
  • Gazette on 'Cyber Safety Ordinance' end of this month: Faiz
  • Nation-state cyber attacks: Are you at risk?
  • Yunus orders launch of Starlink's broadband within 90 days

The problem with Bangladesh’s data protection framework and its solutions

Bangladesh’s existing laws failed to set the standards to protect against the unauthorised use of personal data. Countless privacy violations that were evidenced previously, and occur daily in Bangladesh support this claim  

Kamrul Faisal
19 August, 2022, 12:30 pm
Last modified: 19 August, 2022, 12:45 pm

Privacy protection is a human right under Bangladesh's legal system as it acceded to a key human rights treaty ‒ the International Covenant on Civil and Political Rights (ICCPR) unconditionally in 2000. 

Nevertheless, Bangladesh's data protection regulatory framework is incommensurate with contemporary data protection challenges. However, it can be solved.

First, the inability to protect data frustrates the purpose of the right ‒ to protect natural persons from all sorts of privacy harms. The unauthorised use of data leads to privacy harms that adversely affect individuals and society.

For example, at an individual level, evidence shows that data compromise led to physical, economic, reputational and related harms. It makes individuals vulnerable to targeted discrimination, and limited autonomy on informational self-determination. At the state level, it results in criminal and unethical activities resulting in unnecessary costs related to cybercrimes and damages to the country's integrity and also creates distrust in e-services.

The Business Standard Google News Keep updated, follow The Business Standard's Google news channel

Second, the existing laws of Bangladesh failed to set norms to protect against the unauthorised use of personal data. Countless privacy violations that were evidenced previously, and occur daily in Bangladesh support this claim. 

To illustrate, let me mention a few examples. The Turkish hackers hacked the Bangladesh Air Force website, which compromised 19 administrator identities in 2013. Again, Facebook compromised three million Bangladeshi citizens' data in 2022.

In addition, leakage of several high profile telephone conversations in the recent past has revealed identities of the accused, rape victims, accident victims and suicide victims indiscriminately. Then the case of a UNO (Upazila nirbahi officer) in the Jhenaidah district seizing mobile phones to read personal messages are also noteworthy examples. 

Third, recent incidents concerning policy framing depict that despite having some policies, Bangladesh is reluctant to move forward. The government adopted an extensive national information and communication technology policy in 2018, in which it recognised taking actions to protect personal data as an aspect of achieving digital security. Nevertheless, the government missed the opportunity to enhance certain aspects of personal data protection in its Data Security Rules adopted in 2020.

Fourth, the citizens are not aware of their privacy risks and rights. Therefore, they often, unknowingly, compromise their data.

For instance, sharing photos and other personal contents indiscriminately online on social media, unchecked deployment of video cameras and microphones in our surroundings by anyone and tolerance of various forms of surveillance are some of examples of being unaware of privacy risks.

Last but not the least, Bangladesh is not learning from different countries, which have already learned their lesson in the hard way. According to the 12th International Conference on Business Information Security, Bangladesh is among the 19% of countries that do not have specific privacy policies.

To demonstrate, in response to a national security threat in the United States, the Trump administration banned the Chinese mobile application TikTok in 2020. Again, Cambridge Analytica, a political consulting firm responsible for compromising 87 million Facebook users' data, misused voters' data to manipulate voters through targeted advertisements during Brexit and multiple presidential elections in the United States.

Later on, privacy proponents identified these incidents as the misuse of personal data due to the lack of a strong data protection framework. Now, several states of the US provide a medium level of protection. Additionally, being influenced by the European Union data protection laws, the United Kingdom provides among the highest-level protections in the world. 

However, the situation in Bangladesh did not change much. 

Private entities like some of the large e-commerce and ride-sharing companies collect customers' personal information (e.g. name, address, phone number, email address, national identification number, picture, signature, biometric information, location data, etc) and can process it at will. In addition to that, the mobile network operators collect and process customers' uniquely identifiable biometric data e.g. fingerprints.

No one knows whether they transfer those data to their base countries like Norway, Malaysia, Netherlands, India or elsewhere to data centres and how - or if - they exploit it. Public entities like the election commission, department of immigration and passport also hold records and process biometric data like fingerprints and iris scans of individuals when citizens register NIDs and passports. No one really knows how protection of these valuable data is being ensured; and what are the vast (and legal) implications of breach and misuse.

Bangladesh has many options to act upon. 

First, the legislature can include a separate right to personal data protection, or general privacy right under the constitution and thus enforce it like other fundamental rights under Articles 44 and 102 of the Constitution. 

Second, the legislature could enact an exclusive law regulating personal data protection norms that protects privacy harms.

Third, the judicial organ can enhance the existing constitutional protection related to privacy to cover data protection right by its ruling. Articles 32 and 43 of the Bangladesh Constitution incorporate privacy provisions that can be extended to cover the right. At least, India did the same. 

Fourth, the judiciary can restrict the application of privacy-violating laws and outline privacy-friendly doctrines. Such provisions include Section (Sec.) 5 of the Telegraph Act 1885, which authorises the government to possess licensed telegraphs and intercept messages. Sec. 96 of the Bangladesh Telecommunications Act 2001‒ empowers the government to take over any communications system, and force the network operator companies to comply with it. 

Moreover, the draconian misuse of Sec. 57 of the Information and Communication Technology Act 2006 is evidenced throughout the country. Again, Sec. 41 of the Digital Security Act 2018 allows law enforcement agencies to possess any computer systems and online traffic data without any prior warrant.

And finally, to reiterate, it is incredibly vital for the public to understand and be aware of data privacy rights, limitations and risks. The relevant stakeholders must take initiatives to build awareness among people and establish data protection behaviour. 

If not addressed early, it can yield a risk to national security.


Kamrul Faisal is a doctoral researcher at the University of Helsinki, Faculty of Law. 

Disclaimer: The views and opinions expressed in this article are those of the author and do not necessarily reflect the opinions and views of The Business Standard.

Data Security / Cyber Security / tech

Comments

While most comments will be posted if they are on-topic and not abusive, moderation decisions are subjective. Published comments are readers’ own views and The Business Standard does not endorse any of the readers’ comments.

Top Stories

  • Ships and shipping containers are pictured at the port of Long Beach in Long Beach, California, US, 30 January 2019. Photo: REUTERS
    Bangladesh may offer zero-duty on US goods to get reciprocal tariff relief
  • Expatriates and students rallied across the globe — from Malaysia to the USA, UK, Middle East, and Europe — in protest against the Hasina government in July 2024. Photo: Anonno Afroz
    How expatriates powered the July uprising from afar
  • BNP Standing Committee member Salahuddin Ahmed spoke at a rally organised by the Keraniganj Upazila South BNP today (5 July). Photo: Collected
    AL allies of 16 years now back proportional elections: Salahuddin

MOST VIEWED

  • Ships and shipping containers are pictured at the port of Long Beach in Long Beach, California, US, 30 January 2019. Photo: REUTERS
    Bangladesh expects US tariff relief after Trump announces cuts to Vietnam
  • Customs bureaucracy: Luxury cars rot at Ctg port
    Customs bureaucracy: Luxury cars rot at Ctg port
  • The release was jointly carried out by the Forest Department and the Chattogram Zoo authorities as part of an ongoing initiative to conserve wildlife and maintain ecological balance. Photo: Collected
    33 Python hatchlings born in Ctg zoo released into Hazarikhil sanctuary
  • File photo of a new NBR office in Agargaon, Dhaka. Photo: UNB
    NBR launches 'a-Chalan' for instant online tax payments
  • Officials from various NBR offices in the capital gather at the NBR headquarters in Agargaon, Dhaka on 24 June. File Photo: TBS
    Govt may ease punitive actions against NBR officials
  • Infograph: TBS
    How BB’s floating rate regime calms forex market

Related News

  • Govt issues gazette of Cyber Security Ordinance
  • Chinese internet giant Tencent interested in entering Bangladesh market
  • Gazette on 'Cyber Safety Ordinance' end of this month: Faiz
  • Nation-state cyber attacks: Are you at risk?
  • Yunus orders launch of Starlink's broadband within 90 days

Features

Students of different institutions protest demanding the reinstatement of the 2018 circular cancelling quotas in recruitment in government jobs. Photo: Mehedi Hasan

5 July 2024: Students announce class boycott amid growing protests

1d | Panorama
Contrary to long-held assumptions, Gen Z isn’t politically clueless — they understand both local and global politics well. Photo: TBS

A misreading of Gen Z’s ‘political disconnect’ set the stage for Hasina’s ouster

1d | Panorama
Graphics: TBS

How courier failures are undermining Bangladesh’s online perishables trade

1d | Panorama
The July Uprising saw people from all walks of life find themselves redrawing their relationship with politics. Photo: Mehedi Hasan

Red July: The political awakening of our urban middle class

1d | Panorama

More Videos from TBS

Trump says he is about to raise tariffs as high as 70% on some countries

Trump says he is about to raise tariffs as high as 70% on some countries

4h | TBS World
Will political disputes delay the elections?

Will political disputes delay the elections?

5h | TBS Stories
Initiative to break the deadlock created by the US

Initiative to break the deadlock created by the US

5h | TBS World
Beijing openly sides with Moscow for the first time

Beijing openly sides with Moscow for the first time

7h | TBS World
EMAIL US
contact@tbsnews.net
FOLLOW US
WHATSAPP
+880 1847416158
The Business Standard
  • About Us
  • Contact us
  • Sitemap
  • Advertisement
  • Privacy Policy
  • Comment Policy
Copyright © 2025
The Business Standard All rights reserved
Technical Partner: RSI Lab

Contact Us

The Business Standard

Main Office -4/A, Eskaton Garden, Dhaka- 1000

Phone: +8801847 416158 - 59

Send Opinion articles to - oped.tbs@gmail.com

For advertisement- sales@tbsnews.net